This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to setup proxy rules to do the following

I am attempting to setup some proxy rules see the flowchart attached.

How would I go about doing this?

some notes:
I have 3 AD groups:Internet users, Company A Users, Company B Users that I want to use to make this work.

Company A and Company B are Site to Site vpn tunnels to the Astaro.

Download Astaro Internet - Company AB - Flowchart.pdf from Sendspace.com

This thread was automatically locked due to age.

0 TeBear77 over 13 years ago

https://www.dropbox.com/s/1rtntbiximw06pi/Astaro%20Internet%20-%20Company%20AB%20-%20Flowchart.pdf here is a link to the pdf version of the flow chart.
Cancel
Vote Up 0 Vote Down

Cancel
0 wingman over 13 years ago

Hi TeBear77

Have a look at the manual "HTTP proxy Profiles Guide"

Astaro Security Gateway: HTTP proxy Profiles Guide

If you are not able to create the required rules ,let us know the exact issue and we will be more than happy to help you troubleshoot [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 13 years ago

Hi, TeBear77,

I like mine better, Wingman! [;)] HTTP/S Proxy Access with AD-SSO.

Cheers - Bob
PS The link in #2 is to a web archive file, not a pdf, so it's not possible to read your diagram.
Cancel
Vote Up 0 Vote Down

Cancel
0 TeBear77 over 13 years ago

so in the Astaro example (jpg attached) if a user is part of Sales and Part of R&D and it's not lunchtime. will they get the filter actions of Strict or Allow all?
Cancel
Vote Up 0 Vote Down

Cancel
0 TeBear77 over 13 years ago

In my flowchart I need the user to get Strict + Allow All ... if this is the case my question is answered though if they hit the first rule and are out then my question still remains.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 13 years ago

TeBear, this is just like everywhere else in WebAdmin; when a packet qualifies for a Traffic Selector, no further rules of the type are considered. So, the sequence of Profiles matters, and the sequence of the Filter Assignments in a Profile Matters.

The answer to your last two questions is that you need another AD Security Group and another Backend Group in WebAdmin.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel